Welcome to Splunk Answers, a Q&A forum for users to find answers to questions about deploying, managing, and using Splunk products. Contributors of all backgrounds and levels of expertise come here to find solutions to their issues, and to help other users in the Splunk community with their own questions.

This quick tutorial will help you get started with key features to help you find the answers you need. You will receive 10 karma points upon successful completion!

Refine your search:

How to modify Dashboard Source Report based on time range?

0

Hopefully you guys can help me out. I am trying to put together a dashboard that is based on a scheduled report. I have that part working fine. My problem is that I would like to change which scheduled report is providing the base data depending on the time range selected. For example, if I my time range is just one or two days, I want to use my report that is looking near-realtime data and provides detailed information. If however the time range is for a week or longer, I want to use a report that references summary data instead of the raw data. I found this post (https://answers.splunk.com/answers/404131/how-to-create-a-dashboard-to-display-report1-repor.html) that looks similar to what I am trying to do, but don't totally understand the answer that finally worked.

A portion of my code (it's on a separate computer that I can't connect right now)

Again, this is just a portion of the overall dashboard that currently works. I need to figure out how to change the reference that MainSearch ties back to based on the time range. Appreciate any help you can offer....Troy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here. Closing this box indicates that you accept our Cookie Policy.